Threat Intelligence Blog

Scam of the Day – Airline Ticket Notification Malware Continues to Spread

Scam of the Day – Airline Ticket Notification Malware Continues to Spread

Loyal blog readers may remember the airline ticket notification malware scam we warned of last month. It appears the campaign is continuing to propagate, as another airline ticket confirmation notice is making the rounds this week. The subject line observed by Cyveillance Labs was, “Your ticket #00508554 is ready” and the sender appeared as “Delta Air”. The attachment observed was a version of the Weelsof Trojan, MD5 signature is ee1f420a7e478d73e7d00e19dcea2f91. Details of the malware can be found on various A/V and security sites including here and here.